Check Point Quantum Security Gateway Firmware vulnerabilities

2 CVEs affecting Check Point Quantum Security Gateway Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-24919, published 2024-05-28.

More from Check Point.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-24919: Check Point Quantum Security Gateways Information Disclosure Vulnerability, published 2024-05-28. High severity, CVSS 8.6. Actively exploited: in CISA KEV since 2024-05-30. EPSS: 100% chance of exploitation in the next 30 days. Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A…
• CVE-2021-3449, published 2021-03-25. Medium severity, CVSS 5.9. EPSS: 63.5% chance of exploitation in the next 30 days. An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where…